Dragon Mistico

Privacy Policy

Last updated: April 2026

1. Data Controller

Guillermo Verón
c/o IP Management #9588
Ludwig-Erhard-Str. 18
20459 Hamburg, Germany
Email: veronguille@gmail.com
Phone: +49 1573 9643447

A Data Protection Officer is not required under Art. 37 GDPR as we do not carry out large-scale processing of special categories of personal data.

2. Website Hosting (Hostinger)

This website is hosted by Hostinger International Ltd, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

When you visit our website, your browser automatically transmits technical data to our hosting server, which is temporarily stored in server log files:

Purpose: Technical operation of the website, error detection, and security.
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in the secure and error-free operation of the website.
Retention period: Server logs are automatically deleted after 7 days.

A data processing agreement (DPA) under Art. 28 GDPR has been concluded with Hostinger.

3. Online Shop and Payments (SumUp)

When you purchase a product through our shop, payment processing is handled by SumUp Payments Limited (Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland).

During the checkout process, we collect the following data:

Payment data (card number etc.) is processed exclusively by SumUp. We only receive confirmation of payment success or failure.

Purpose: Fulfilment of your purchase order.
Legal basis: Art. 6(1)(b) GDPR – performance of a contract.
Retention period: Order data is retained for 10 years as required by German commercial and tax law (§ 147 AO), after which it is deleted.

SumUp is based in Ireland and is directly subject to the GDPR. For more information see SumUp's Privacy Policy.

4. Event Organizer Contact Form

Via the organizer contact form, you can reach us for event invitations. We collect:

This data is transmitted to us by email only and is not stored in any database.

Purpose: Responding to your event inquiry.
Legal basis: Art. 6(1)(a) GDPR – your explicit consent (consent checkbox in the form).
Retention period: Emails are deleted after the correspondence is concluded, no later than 2 years.

You may withdraw your consent at any time by emailing veronguille@gmail.com.

5. Web Fonts (Bunny Fonts)

This website uses fonts from Bunny.net (bunny.net, ltd., Cesta komandanta Staneta 4a, 1215 Medvode, Slovenia), an EU-based, GDPR-compliant provider that does not log IP addresses or share personal data with third parties.

Legal basis: Art. 6(1)(f) GDPR – legitimate interest in consistent visual presentation of the website.

6. Local Storage

This website stores only technically necessary data in your browser's local storage:

No tracking cookies, advertising cookies, or analytics tools are used on this site.

Legal basis: Art. 6(1)(f) GDPR – legitimate interest in the essential functionality of the website; Art. 25(2) GDPR – data minimisation.

7. Your Rights (Arts. 15–22 GDPR)

You have the following rights regarding your personal data:

To exercise any of these rights, contact us at: veronguille@gmail.com

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Hamburg, Germany is:

Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany
Tel.: +49 40 42854-4040
Email: mailbox@datenschutz.hamburg.de
Web: datenschutz.hamburg.de

9. International Data Transfers

All service providers we use (Hostinger, SumUp, Bunny.net) are based in the European Union or the European Economic Area. No personal data is transferred to third countries outside the EU/EEA.

10. Automated Decision-Making

We do not use automated decision-making or profiling as referred to in Art. 22 GDPR.

11. Changes to this Privacy Policy

We reserve the right to update this privacy policy as necessary. The current version is always available on this page. Date of last update: April 2026.